Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9137992/0232834867CC11E8AD843963C4F9AE02/811B0DF274CB11EF941F0A71C4F9AE02.roa
File: 811B0DF274CB11EF941F0A71C4F9AE02.roa (raw, json)
Hash identifier: 9CCdXAmyhsUIKZ6n8Wk1KKSvrNfp24roJJogpEjyBYw=
Subject key identifier: 0A:B8:D1:7A:58:3A:23:6B:D7:C8:36:01:19:A3:2D:01:07:2F:5A:4C
Certificate issuer: /CN=A9137992/serialNumber=C94A0350E709F56C2396E30B470C8B5E1DFB1700
Certificate serial: 1427
Authority key identifier: C9:4A:03:50:E7:09:F5:6C:23:96:E3:0B:47:0C:8B:5E:1D:FB:17:00
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yUoDUOcJ9WwjluMLRwyLXh37FwA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9137992/0232834867CC11E8AD843963C4F9AE02/811B0DF274CB11EF941F0A71C4F9AE02.roa
Signing time: Sat 28 Dec 2024 16:54:30 +0000
ROA not before: Sat 28 Dec 2024 16:54:30 +0000
ROA not after: Mon 02 Mar 2026 00:00:00 +0000
asID: 9464
IP address blocks: 202.12.73.0/24 maxlen: 24
202.12.74.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5159 (0x1427)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9137992
Validity
Not Before: Dec 28 16:54:30 2024 GMT
Not After : Mar 2 00:00:00 2026 GMT
Subject: CN=67702d46-7949
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:14:2b:b9:84:73:0d:d7:55:9b:d3:30:b5:9a:
6e:6f:d5:93:05:d1:72:c1:1e:68:71:83:34:67:b3:
26:a0:48:f5:a8:83:3e:da:63:18:aa:18:dc:a8:c3:
1f:fd:dd:af:46:67:c4:f2:2f:1b:09:8b:ce:96:37:
10:46:1b:8f:4c:23:91:97:a3:a5:bc:b3:2b:38:9b:
62:6c:be:c9:f4:02:ec:87:66:af:78:03:2d:05:18:
91:69:eb:1a:50:89:a4:18:7e:d7:c6:c0:8e:10:76:
f2:f8:88:9f:53:ab:2c:c9:82:e9:de:ef:a4:f5:65:
15:dc:2e:74:4e:dd:e7:cc:4b:d3:d6:75:b3:fa:8d:
0f:a4:2e:d7:5e:f8:3f:a9:93:ae:71:5f:37:7c:cd:
4f:27:d3:44:c7:19:e5:48:c4:1c:43:f5:40:d1:b1:
8b:a8:18:47:a5:f7:d9:2a:ab:51:ec:27:4f:10:0a:
79:ba:36:e0:79:56:65:25:a3:93:71:f1:88:ed:dd:
02:86:2d:5f:01:50:50:3f:b8:1b:e8:22:51:11:39:
34:c1:bb:38:dd:49:c9:a9:a9:ab:42:fd:8c:60:71:
f3:2a:fb:0f:c3:80:32:38:e3:65:56:e3:6d:cd:32:
2e:42:c9:fd:a9:cc:55:8b:98:84:f4:bc:b8:2f:d3:
fe:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:B8:D1:7A:58:3A:23:6B:D7:C8:36:01:19:A3:2D:01:07:2F:5A:4C
X509v3 Authority Key Identifier:
keyid:C9:4A:03:50:E7:09:F5:6C:23:96:E3:0B:47:0C:8B:5E:1D:FB:17:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9137992/0232834867CC11E8AD843963C4F9AE02/yUoDUOcJ9WwjluMLRwyLXh37FwA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yUoDUOcJ9WwjluMLRwyLXh37FwA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137992/0232834867CC11E8AD843963C4F9AE02/811B0DF274CB11EF941F0A71C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
202.12.73.0-202.12.74.255
Signature Algorithm: sha256WithRSAEncryption
5d:23:ba:0e:53:d7:d1:7c:6e:36:db:5f:08:2e:fa:7f:f2:8a:
17:64:cc:93:e6:3c:76:0c:20:62:93:2a:d3:e2:46:26:ca:9b:
b5:ef:37:0f:f7:31:1f:87:a4:ba:5d:04:b0:c9:18:e7:5b:34:
57:61:b0:4a:7e:7a:f8:31:46:90:82:a6:96:04:e5:72:36:c3:
51:4c:7a:4a:f6:10:cd:43:82:e6:cb:2c:c6:f3:0f:17:06:81:
47:e1:f1:49:53:ab:2a:31:c9:3a:3e:57:36:59:ff:81:c2:b5:
bb:58:bd:54:3e:63:cd:fd:63:ee:ed:61:f6:a6:59:81:be:16:
87:43:45:b2:28:10:38:55:21:c8:09:85:4d:0e:3c:cd:53:f6:
e8:98:fa:c0:62:05:4e:4a:fd:cb:18:1c:13:d5:ab:3b:01:d7:
3c:1f:93:c9:db:48:3a:4a:df:77:02:09:a9:cb:d4:8b:5d:29:
53:3a:60:b7:83:ee:93:da:08:c2:8c:77:1e:03:ff:fd:eb:9e:
f6:19:d8:1f:a9:c4:fe:cf:d3:51:3a:04:a1:a6:58:bd:e9:6d:
bb:35:30:cf:3b:63:7b:97:0b:68:fb:f9:59:2a:d5:04:e9:c3:
76:f3:68:cd:c9:4f:89:6d:0f:05:2a:83:fb:ae:13:79:43:6d:
7e:0c:4d:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 12:17:15 2025 by rpki-client